{"uuid": "b997fd14-5d40-4cec-b609-5eb7a5e8fc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51092", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/librenms_authenticated_rce_cve_2024_51092.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"murrant (Tony Murray)\", \"Takahiro Yokoyama\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"An authenticated attacker can create dangerous directory names on the system and\\n          alter sensitive configuration parameters through the web portal.\\n          Those two defects combined then allows to inject arbitrary OS commands inside shell_exec() calls,\\n          thus achieving arbitrary code execution.\", \"disclosure_date\": \"2024-11-15\", \"fullname\": \"exploit/linux/http/librenms_authenticated_rce_cve_2024_51092\", \"is_install_path\": true, \"mod_time\": \"2026-02-09 15:17:23 +0000\", \"name\": \"LibreNMS Authenticated RCE (CVE-2024-51092)\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/librenms_authenticated_rce_cve_2024_51092.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/librenms_authenticated_rce_cve_2024_51092\", \"references\": [\"GHSA-x645-6pf9-xwxw\", \"CVE-2024-51092\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:42.823352Z"}